On my server, something is accessing apache 24/7. I can not find the process doing it. Under the logs I get the following:
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?51 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?52 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?53 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?54 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?55 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?56 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?57 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?58 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?59 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?60 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?61 HTTP/1.0" 404 - "-" "-"
Does anybody have any idea what could be doing this? I have mod evasive on apache to block things like this, but since it is from the server itself, I am lost.
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?51 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?52 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?53 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?54 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?55 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?56 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?57 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?58 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?59 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?60 HTTP/1.0" 404 - "-" "-"
127.0.0.1 - - [18/Sep/2006:20:45:18 -0500] "GET /?61 HTTP/1.0" 404 - "-" "-"
Does anybody have any idea what could be doing this? I have mod evasive on apache to block things like this, but since it is from the server itself, I am lost.